mirror of
https://github.com/lukaszraczylo/harness-sync.git
synced 2026-10-12 00:45:22 +00:00
lukaszraczyloandGitHub
406382a6d4
Security Scan workflow on main failed with 18 standard-library vulnerabilities (GO-2025-4007..4015, GO-2025-4155, GO-2026-4337, plus a few more). All are fixed in later 1.25.x patches. Lowest 1.25.x version that govulncheck accepts clean is 1.25.10. go.sum unchanged — the repo's go.sum already pointed at oss-telemetry v0.2.3 and go-runewidth v0.0.24, which is what 1.25.10 + tidy resolves to. Verified locally with GOTOOLCHAIN=go1.25.10: - go build ./... clean - go test -count=1 ./... 20/20 packages pass - govulncheck ./... No vulnerabilities found go-version-file: go.mod in lint.yaml and security.yaml will auto-pick the new version; no workflow changes needed.
48 lines
1.9 KiB
AMPL
48 lines
1.9 KiB
AMPL
module github.com/lukaszraczylo/harness-sync
|
|
|
|
go 1.25.10
|
|
|
|
require (
|
|
github.com/charmbracelet/huh v1.0.0
|
|
github.com/lukaszraczylo/oss-telemetry v0.2.3
|
|
github.com/pelletier/go-toml/v2 v2.3.1
|
|
github.com/spf13/afero v1.15.0
|
|
github.com/spf13/cobra v1.10.2
|
|
github.com/stretchr/testify v1.9.0
|
|
gopkg.in/yaml.v3 v3.0.1
|
|
)
|
|
|
|
require (
|
|
github.com/atotto/clipboard v0.1.4 // indirect
|
|
github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
|
|
github.com/catppuccin/go v0.3.0 // indirect
|
|
github.com/charmbracelet/bubbles v1.0.0 // indirect
|
|
github.com/charmbracelet/bubbletea v1.3.10 // indirect
|
|
github.com/charmbracelet/colorprofile v0.4.3 // indirect
|
|
github.com/charmbracelet/lipgloss v1.1.0 // indirect
|
|
github.com/charmbracelet/x/ansi v0.11.7 // indirect
|
|
github.com/charmbracelet/x/cellbuf v0.0.15 // indirect
|
|
github.com/charmbracelet/x/exp/strings v0.1.0 // indirect
|
|
github.com/charmbracelet/x/term v0.2.2 // indirect
|
|
github.com/clipperhouse/displaywidth v0.11.0 // indirect
|
|
github.com/clipperhouse/uax29/v2 v2.7.0 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/dustin/go-humanize v1.0.1 // indirect
|
|
github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f // indirect
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
|
github.com/lucasb-eyer/go-colorful v1.4.0 // indirect
|
|
github.com/mattn/go-isatty v0.0.22 // indirect
|
|
github.com/mattn/go-localereader v0.0.1 // indirect
|
|
github.com/mattn/go-runewidth v0.0.24 // indirect
|
|
github.com/mitchellh/hashstructure/v2 v2.0.2 // indirect
|
|
github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 // indirect
|
|
github.com/muesli/cancelreader v0.2.2 // indirect
|
|
github.com/muesli/termenv v0.16.0 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/rivo/uniseg v0.4.7 // indirect
|
|
github.com/spf13/pflag v1.0.10 // indirect
|
|
github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e // indirect
|
|
golang.org/x/sys v0.45.0 // indirect
|
|
golang.org/x/text v0.37.0 // indirect
|
|
)
|